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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings of claims in the 
application. 

1. (original) A system for managing administration of computer services 
provided to users comprising: 

a computer system; 

an operating system running on the computer system; 

a server process launched by the operating system for providing a service to a 
user; and 

an isolated Virtual Private Server (VPS) with a set of services that perform 
administrative operations relating to one of the server process and the operating system. 

2. (original) The system of claim 1, wherein the server process is any of a 
file server, an authentication server, a chroot environment server, a jail environment, a 
print server, a POP3 server, an IMAP/IMAP4 server, an SMTP server, a scheduler 
server, a COM/COM+/DCOM server, a cryptographies server, a browser server, a DHCP 
server, a distributed file system server, a Distributed Link tracking server, an event log 
server, a reporting server, a file replicator server, an indexing server, a firewall server, a 
Kerberos server, an IPSEC server, a logon server, a Network DDE server, an NLA 
server, a performance logs and alerts server, a plug and play server, a print spooler 
server, a protected storage server, a disk encryption server, a routing server, a remote 
access server, a system event notification server, a telnet server, an uninterruptible power 
supply server, a Windows Management Instrumentation (WMI) server, a wireless 
configuration server, a WMI performance adaptor server, a data base server, a network 
address translation server, an IRC server, an inetd server, a volume shadow copy server, 
a boot and remote boot server, a finger server, a who server, a rexec server, a webster 
server, a conference server, a zip server, an afbackup server, an ASP server, and a fido 
server. 
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3. (original) The system of claim 1, wherein the server process is any of an 
FTP server, a sand box environment server, a chat server, an X windows server, a secure 
shell (SSH) server, and a socks server. 

4. (original) The system of claim 1, wherein the server process is a 
webserver. 

5. (original) The system of claim 1, wherein the server process is any of a 
file server, a VPS, a Windows Terminal Service, a domain name server, an SSL server, 
an instant messaging server, a message write server, a security account manager server, a 
telephony server, a virtual disk server, a Windows installer server, a radius server, and a 
backup server. 

6. (original) The system of claim 1, wherein the server process includes any 
of a WAP server, Plesk server^^, a Virtuozzo™ server, a Virtuozzo for Windows™ 
server, a wireless access server, a wireless router and a wireless access point. 

7. (original) The system of claim 1, wherein the administrative operations 
include any of: 

collection of statistics relating to the server process; 

servicing of requests for management of the server process; 

servicing of requests for management of operating system functions; 

servicing of requests for computer system resource allocation; 

servicing of requests for computer system resource re-allocation; 

servicing of requests for authorization within the operating system; 

servicing of requests for authorization within the server process; 

servicing of requests that the server process is forbidden from executing; 

servicing of requests that the server process cannot execute; 

servicing of operations that potentially can cause a fault in the server process; 

servicing of operations that require multiplexing of server processes; 

data backup and restore operations, update and patch installation; 
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checking permissions for operations; 
security-related analysis and operations; 
audit of operations; 

application installation and configuration; 

network and other OS and application parameter configuration; 

driver installation and upgrade; 

spam filter operation; 

firewall installation and configuration; 

creation and deletion of users; 

creation and deletion of groups; 

license-related management; and 

remote access management. 

8. (original) The system of claim 7, wherein the multiplexing is performed 
using separation of requests based on a different network protocol address. 

9. (original) The system of claim 7, wherein the multiplexing is performed 
using separation of requests based on a content of a request directed to the server 
process. 

10. (original) The system of claim 1, wherein the administrative operations 
include any of: 

servicing of requests for authorization within the operating system; 

servicing of requests for authorization within the server process; 

creation and deletion of users; 

creation and deletion of groups; 

license-related management; 

remote access management; and 

security-related analysis and operations. 
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11. (original) The system of claim 1, wherein the administrative operations 
include any of: 

servicing of requests that the server process is forbidden from executing; 

servicing of requests that the server process cannot execute; and 

servicing of operations that potentially can cause a fault in the server process. 

12. (original) The system of claim 1, wherein the administrative operations 
includes application installation and configuration. 

13. (original) The system of claim 1, wherein the administrative operations 
includes data backup and restore operations. 

14. (original) The system of claim 1, wherein VPS isolation can include any 
of logical isolation of processes, physical isolation of processes, namespace isolation, 
data isolation, address isolation, fault isolation and performance isolation. 

15. (original) The system of claim 1, wherein VPS isolation includes 
resource isolation. 

16. (original) The system of claim 1, wherein the administrative operations 
include any of servicing of VPS migration requests; 

servicing of processes migration requests; and 
servicing of requests for computer system resources. 

17. (original) A system for managing administration of computer services 
provided to users comprising: 

a computer system; 

an operating system running on the computer system; 

a plurality of server processes running within the computer system that provide a 

service to a user; and 

a plurality of administrative servers that perform administrative operations 
relating to the server processes. 
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18. (original) The system of claim 17, wherein the server processes include 
any of a file server, an authentication server, a chroot environment server, a jail 
environment, a print server, a POPS server, an IMAP/IMAP4 server, a SMTP server, a 
scheduler server, a COM/COM+/DCOM server, a cryptographies server, a browser 
server, a DHCP server, a distributed file system server, a Distributed Link tracking 
server, an event log server, a reporting server, a file replicator server, an indexing server, 
a firewall server, a Kerberos server, an IPSEC server, a logon server, a Network DDE 
server, an NLA server, a logs and alerts server, a plug and play server, a print spooler 
server, a protected storage server, a disk encryption server, a routing server, a remote 
access server, a system event notification server, a telnet server, an uninterruptible power 
supply server, a Windows Management Instrumentation (WMI) wireless configuration 
server, a WMI performance adaptor server, a data base server, a network address 
translation server, an IRC server, an inetd server, a volume shadow copy server, a boot 
and remote boot server, a finger server, a who server, a rexec server, a webster server, a 
conference server, a zip server, an afbackup server, an ASP server, a fido server, WAP 
servers, Plesk server™, Virtuozzo™ servers, Virtuozzo for Windows™ servers, wireless 
access servers, wireless routers and wireless access points. 

19. (original) The system of claim 17, wherein the server process is any of an 
FTP server, a sand box environment server, a chat server, an X windows server, a secure 
shell (SSH) server, and a socks server. 

20. (original) The system of claim 17, wherein the server process is a 
webserver. 

21. (original) The system of claim 17, wherein the server process is any of a 
file server, a VPS, a Windows Terminal Service, a domain name server, an SSL server, 
an instant messaging server, a message write server, a security account manager server, a 
telephony server, a virtual disk server, a Windows installer server, a radius server, and a 
backup server. 
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22. (original) The system of claim 17, wherein the administrative operations 
include any of: 

collection of statistics relating to the server process; 
servicing of requests for management of the server process; 
servicing of requests for management of operating system functions; 
servicing of requests for computer system resource allocation; 
servicing of requests for computer system resource re-allocation; 
servicing of operations that require multiplexing of server processes; 
data backup and restore operations, update installation; 
security-related analysis and operations; 
audit of operations; 

network and other OS and application parameter configuration; 

driver installation and upgrade; 

spam filter operation; and 

firewall installation and configuration. 

23. (original) The system of claim 22, wherein the multiplexing is based on a 
network protocol addressing. 

24. (original) The system of claim 22, wherein the multiplexing is based on a 
content of a request directed to the server process. 

25. (original) The system of claim 17, wherein the administrative operations 
include any of: 

servicing of requests for authorization within the operating system; 

servicing of requests for authorization within the server process; 

checking permissions for operations; 

creation and deletion of users; 

creation and deletion of groups; 

license-related management; 

remote access management; and 
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security-related analysis and operations. 

26. (original) The system of claim 17, wherein the administrative operations 
include any of: 

servicing of requests that the server process is forbidden from executing; and 
servicing of operations that potentially can cause a fault in the server process. 

27. (original) The system of claim 17, wherein the administrative operations 
include application installation and configuration. 

28. (original) The system of claim 17, wherein the administrative operations 
include data backup and restore operations. 

29. (original) The system of claim 17, wherein VPS isolation can include any 
of logical isolation of processes, physical isolation of processes, namespace isolation, 
data isolation, address isolation, fault isolation and performance isolation. 

30. (original) The system of claim 17, wherein VPS isolation includes 
resource isolation. 

31. (original) The system of claim 17, wherein the administrative operations 
include any of: 

servicing of VPS migration requests; 
servicing of processes migration requests; and 
servicing of requests for computer system resources. 

32. (original) A system for managing computer services provided to users 
comprising: 

a computer system; 

an operating system running on the computer system; 

a plurality of server processes running within the computer system that provide a 

service to a user; and 
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an administrative server that instantiates and terminates the server processes in 
response to user requests for the service. 

33. (original) The system of claim 32, wherein the server processes include 
any of a webserver, a file server, an FTP server, an authentication server, a VPS, a chroot 
environment server, a jail environment, a sand box environment server, a print server and 
a Windows Terminal Service, a POP3 server, an IMAP/IMAP4 server, a SMTP server, a 
scheduler server,. A COM/COM+/DCOM server, a cryptographies server, a browser 
server, a DHCP server, a Distributed file system server, a Distributed Link tracking 
server, an event log server, a reporting server, a DNS server, a file replicator server, an 
SSL server, an indexing server, a firewall server, a Kerberos server, an IPSEC server, an 
instant messaging server, a message write server, a logon server, a Network DDE server, 
an NLA server, a perfomiance logs and alerts server, a plug and play server, a print 
spooler server, a protected storage server, a disk encryption server, a routing server, a 
remote access server, a security account manager server, a system event notification 
server, a telnet server, a telephony server, an uninterruptible power supply server, a 
virtual disk server, a Windows installer server, a Windows management instrumentation 
wireless configuration server, a WMI performance adaptor server, a data base server, a 
Network address translation server, an IRC server, a chat server, an X windows server, 
an inetd server, a volume shadow copy server, a boot and remote boot server, a finger 
server, a secure shell (SSH) server, a who server, a rexec server, a webster server, a 
conference server, a radius server, a zip server, a socks server, an afbackup server, a 
backup server, an ASP server, a fido server, a WAP server, Plesk server™, a 
Virtuozzo^^ server, a Virtuozzo for Windows™ server, a wireless access server, a 
wireless router and a wireless access point. 

34. (original) The system of claim 32, wherein the instantiation is based on a 
network protocol addressing of the user requests. 

35. (original) The system of claim 32, wherein the instantiation is based on a 
content of the user requests. 
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36. (original) A system for managing computer services provided to users 
comprising: 

an operating system running on a computer system; 

a plurality of server processes running within the computer system that provide a 
service to a user; and 

means for instantiating and terminating the server processes in response to user 

requests for the service. 

37. (original) A method for managing computer services provided to users 
comprising: 

receiving a request for service from a user; 
determining an addressee process of the request; 

determining if the addressee process has been instantiated and launched; 
instantiating and launching the addressee process if the addressee process has not 
been instantiated and launched; 

generating a response to the request; and 
sending the response to the user. 

38. (original) The method of claim 37, wherein the addressee is identified 
based on a network protocol addressing of the request. 

39. (original) The method of claim 37, wherein the addressee is identified 
based on a content of the request. 

40. (original) The method of claim 37, further including terminating the 
addressee process. 

41. A computer program product for managing computer services provided to 
users, (original) The computer program product comprising a computer useable medium 
having computer program logic recorded thereon for controlling at least one processor, 
the computer program logic comprising: 
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computer program code means for receiving a request for service from a user; 
computer program code means for determining an addressee process of the 
request; 

computer program code means for determining if the addressee process has been 
instantiated and launched; 

computer program code means for instantiating and launching the addressee 
process if the addressee process has not been instantiated and launched; 

computer program code means for generating a response to the request; and 

computer program code means for sending the response to the user. 

42. (original) The computer program product of claim 41, wherein the 
addressee is identified based on a network protocol addressing of the request. 

43. (original) The computer program product of claim 41, wherein the 
addressee is identified based on a content of the request. 

44. (original) The computer program product of claim 41, further including 
computer program code means for terminating the addressee process. 

45. (new) A system for managing security of a computer environment 
comprising: 

a server; 

an operating system running on the server; 

a first Virtual Machine running on the server and dedicated to security functions; 

and 

a plurality of other Virtual Machines running on the computer and providing 
application services to users, wherein the first Virtual Machine implements security 
functions for the other Virtual Machines. 

46. (new) The system of claim 45, wherein the security functions include any 
of anti-spam, firewall, network security and content filtering. 
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